This page explains how Exosome Therapy Miami treats consumer health data from its waitlist and how you can control it. Version en-US-2026-10-15-3, effective October 15, 2026.
Who we are
Exosome Therapy Miami is operated by Pharma Coa S.L., 4354 collins avenue, Miami Beach , [email protected] ("we"). We are an information service, not a clinic, and HIPAA does not apply to us. This policy is our notice under Connecticut's Data Privacy Act, Nevada's consumer health data law (NRS 603A.400 to 603A.550) and Washington's My Health My Data Act.
1. What we hold and why
On the waitlist form you give us your name, phone or WhatsApp number, email, neighborhood or ZIP code, a preferred language and the treatment that interests you (facial skin, hair and scalp, microneedling with exosomes or another cosmetic skin concern). That choice can reveal something about your health or a health service you are considering, so we treat it as consumer health data. We also log when you agreed, the versions of the texts you saw and a shortened network address. We use this only to hold your place on the Miami waitlist and to email you when a verified clinic is ready. A daily job deletes each entry 12 months after you joined. The entries live in a database run by our hosting provider, and only the people who manage the waitlist can open it.
2. Where it comes from
From you alone, through the form. We do not purchase it, work it out from your browsing or collect it from anywhere else.
3. Who receives it
No third party or affiliate receives your consumer health data, so the list of recipients is empty. Our hosting and database provider (Cloudflare, Inc.) stores and processes it for us under a contract that binds it to our instructions. There is no partner clinic today. If one is ever added, we will ask for a separate consent that names the clinic before anything is shared.
4. Tracking by others
No outside company collects consumer health data about you over time or across websites while you use this site. It has no cookies, advertising pixels or third-party scripts.
5. How to use your rights
Email [email protected] with the subject "Consumer health data request". You can ask us to confirm whether we collect, share or sell your consumer health data and to send you a copy, including the third parties that received it (none), and you can withdraw your consent, ask for a correction or ask for deletion. To locate your entry we may need you to write from the email address on the form or to quote the phone number you entered. Expect an answer within 45 days; if we need longer we can add 45 days once and will explain why. Deletion happens within 30 days of our confirming that the request is yours, our processors are told to follow, and backups may take longer within what the law allows. Two requests a year cost nothing, and making one never changes how we treat you.
6. Appeals
If we decline a request, reply with the subject "Appeal". We answer in writing within 45 days and explain why. If you still disagree, you may take it to your state's Attorney General: Washington, Nevada or Connecticut.
7. Changes
If what we collect, why we collect it or who receives it changes, we will update this policy and its effective date, email you if you gave an address, and ask for your consent again before the change applies to your data.